CVE-2005-0233 in Firefox

Summary

The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservation

02/07/2005

Disclosure

02/08/2005

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
1176	Mozilla Firefox IDN International Domain Name authentication spoofing	290	Proof-of-Concept	Official fix	CVE-2005-0233
1175	Mozilla Firefox IDN International Domain Name authentication spoofing	290	Proof-of-Concept	Official fix	CVE-2005-0233

Sources

• MITRE
• NVD
• CVE Details